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Fig. 1 Architecture A 



Internal E-mail Infrastructure 




Other Networks 
(The Internet) 



Legend: * = sender identity 
/■= recipient Identity 

P(s.#) = Request security status on a message from s to r 
= Security status on a message from s to r 
R, = Ok, continue processing message 
Rj = Reject, do not process the message 
R, = Defer, temporarily defer the message back to the sending 
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Fig. 2 Inbound Message Preparation 




( To Fig 3\ 
I Enforced ) 

Legend: = sender identity \Securityy 
r= recipient identity 
M(s,r) = A message from s to r 

np-ir!ll'-^ ^ database table containing "real" (i.e. non-proxy) addresses 
UE_ALIAS IS a database table containing proxy addresses 
UE User IS a database table containing user infonnation 
BCA = -Business Card Address", the originator address managed by the 
internal mail transport agent (i. e. mail server) 
is the security settings for the proxy address registered to s for user 
that owns onginator address to which proxy ris a substitute 
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Fig. S Address Translations 



"True" Identifiers (UE_True table) 
T1 = Inside Identifier! 
T2 = Outside Identifier 1 
T3 = Outside Identifier 2 
T4= Inside Identifier 2 
Tn » Outside Identifier n 

s = sender identity 

r= recipient identity 

a = An address reference to translate 

M(s/) = A message from s to r 



Proxy Identifiers (UE_Aiias table) 
•*{tj.ti) = Sutjstltute identifier for T1. registered to T2 
PWi) ° Substitute Identifier for T1 , registered to T3 
P(Tn,Ti) " Substitute identifier for T1. registered to Tn 

^Wx) = Tx. registered to Tx ^ 



T{a) = Method that returns tranlation of » 

message from stor 
D(tx.ti) = Method that returns the proxy P that Tx m 
send e-mail to T1. 



INBOUND, successfully past security, where: 

1 . a = r, s = T2. r = P(j^„). then T(a) = T1 

2. a = r. s = T2. r = P(t^„)' then T(a) = T1 

3- » = P(t4,t4). * = T2. r = P{j^„). then T(a) = T4 
a = P(t«.t«). s = T2. r = P(^^y,), then T(a) = T4 
5. a = T3. s = T2. r = P(t^„). then T(a) = T3 
6- « = P(Tx.Ty). « = ■'■2. T2 is exempt, r = any P, then T{a) = Ty 



joUTI 



'BOUND, no security on outbound, where: 

7. a = r. s = T1, r = T2. then T(a) = P(„ „) 

8. a = r. s = T1, r = T2. D(^„) <> P(^„). tfien T(a) = D(„ „) 

9. a = r. s = T1. r = T2, D(^^,) = P{^^,), then T(a) = P(^j_„) 

10. a = r, s = T1, f = T2, r is exempt, tiien T(a) = [«J 

1 1 . a = T3. s = T1 , f = T2. then T{a) = P(„_^,) 

1Z a = T3, s = T1. r= T2. D(^„) <> P(^,^„}. then T(a) = D(^,_„) 

13. a = T3. s = T1. r = T2. D(„ „) = P(„ „). then T(a) = P(^,^„) 

14. a = T3. s = T1. f = T2, T3 is exempt, then T(a) = P(„ „) [s] 



